Is file769309.up5yev.cyou a scam?

Our automated security review marked file769309.up5yev.cyou as suspicious. Several warning signs were detected; it may still turn out legitimate, but you should verify it through independent channels before trusting it with money or credentials.

Is file769309.up5yev.cyou safe to use?

file769309.up5yev.cyou currently scores 45/100 on our trust scale. We found enough warning signals to recommend caution. Verify the site through independent channels before entering credentials or money.

Does file769309.up5yev.cyou have a valid SSL certificate?

Yes. file769309.up5yev.cyou presents a valid TLSv1.3 certificate issued by Google Trust Services · WE1, expiring in 84 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.

How old is the file769309.up5yev.cyou domain?

file769309.up5yev.cyou is 5 days old, registered on 6/30/2026 through Spaceship, Inc.. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.

Has file769309.up5yev.cyou been flagged by antivirus engines?

No. All 0 antivirus engines in our malware network report file769309.up5yev.cyou as clean.

Is file769309.up5yev.cyou on any phishing or malware blacklists?

No. file769309.up5yev.cyou is not currently listed on the major browser blocklist feeds that modern browsers use.

Where is file769309.up5yev.cyou hosted?

file769309.up5yev.cyou resolves to an IP operated by Cloudflare, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.

How often is the file769309.up5yev.cyou report updated?

This is a permanent record of the scan run on July 5, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around file769309.up5yev.cyou have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Security Review

Is file769309.up5yev.cyou legit or a scam?

Our verdict:Suspicious· 45/100

SafeSuspiciousDangerous

A five-day-old subdomain linked to known malware distribution patterns and high-risk domain extensions used in spam campaigns.

Top reasons

Domain is only 5 days old, indicating a high risk of disposable scam infrastructure.Subdomain naming pattern matches known automated malware distribution templates.The .cyou extension is frequently used for phishing and spam campaigns.

file769309.up5yev.cyouScanned 1h ago

Post Facebook

Trust score

SUSPICIOUS

Score breakdown

Heuristics 55·MT 40

See the live page ↓

Category tags

malwarephishing#malware#phishing85% MT confidence

Technical red flags (1)

Domain is 5 days old

Positive signals (4)

Antivirus clear Not on major blacklists Encrypted connection Clean server reputation

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence

0/0

All engines report clean

Domain Age

5 days old

Registered Jun 30, 2026

MT Intelligence

Suspicious

High likelihood · 85% confidence

SUSPICIOUS

Warning signs detected

Domain was registered only 5 days ago — brand-new sites are higher-risk by default. Several risk indicators suggest caution. This site might be legitimate — but treat it as unverified until you can independently confirm.

Website Preview

LIVE RENDER

file769309.up5yev.cyou

1Screenshot incomplete — site may be slow to render

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →

Visual Screenshot Analysis

We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.

/ 100

High visual risk

Visual red flags detected in the screenshot

We could not capture a fully-rendered screenshot of this page; visual analysis is inconclusive.

Visual risk50/100

What our vision model saw

1 signal

Screenshot incomplete — site may be slow to render

MT Intelligence

Advanced threat intelligence

MT Security Analyst

High scam likelihoodengineMT · Guardiantrust40/100

MT AgentLive web researchVisual inspectionNetwork correlation

Confidence

The domain was registered just five days ago, which is a common trait for infrastructure used in temporary cyberattacks. Our research identified this specific domain and its parent in technical reports alongside known malicious sites used for phishing and malware delivery. The use of the .cyou extension is also a significant red flag, as it is statistically overrepresented in global abuse and spam databases. Furthermore, the random alphanumeric subdomain 'file769309' is a classic indicator of automated, disposable web hosting used to bypass security filters. Because there is no evidence of a legitimate business or service operating here, the risk of data theft or infection is high.

Full dossier

Analysis complete

Page Content

The page appears to be a JavaScript-based application that failed to render a complete interface during our analysis. This behavior is often seen in malicious scripts that check for specific browser environments before displaying their payload or in poorly configured phishing templates.

Infrastructure

The site is hosted on a Cloudflare IP address (104.21.73.183) that has been previously associated with multiple suspicious subdomains in our threat intelligence feeds. The use of a valid SSL certificate from Google Trust Services is a common tactic used by modern scammers to create a false sense of security.

Domain History

Registered through Spaceship, Inc. on July 2026, the domain is only 5 days old. The parent domain (up5yev.cyou) shows no history of legitimate use and appears to exist solely to generate these randomized subdomains for short-term campaigns.

Web Reputation

While no consumer reviews exist due to the site's extreme youth, technical scans from our security partners have flagged this domain family in connection with malware and phishing activity. The .cyou top-level domain is currently ranked as one of the most abused extensions for malicious activity.

Risk Factors

Domain is only 5 days old, indicating a high risk of disposable scam infrastructure.
Subdomain naming pattern matches known automated malware distribution templates.
The .cyou extension is frequently used for phishing and spam campaigns.
Associated with IP addresses previously flagged in malicious urlquery reports.
Complete lack of business registration or verifiable ownership information.

Positive Signals

The site uses a valid SSL certificate for encrypted communication.
No engines in our antivirus network have issued a direct block yet due to the site's age.

AI Recommendation

Do not download any files or provide personal information to this site. Close the page immediately and run a security scan if you have already interacted with it.

Scam network detected

4 linked domains correlated

This domain shares hosting infrastructure and naming conventions with a cluster of sites recently flagged for phishing and malware delivery.

up5yev.cyouukudubo.toppixelbanana.proimages.downho.com

Next-gen fraud intelligence

Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for file769309.up5yev.cyou, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Domain age

5 days

Registered Jun 2026

Business registration

No public record found

Could not match the site to a registered company — common for small sites.

Clone check

Not a clone

No well-known site's layout or branding detected here.

Typosquat check

No look-alike match

The domain doesn't resemble any well-known brand's spelling.

Web mentions

4 scam reports

Key findings

6 headline facts from open-web research

Domain file769309.up5yev.cyou is 5 days old (registered recently as of July 2026).
Subdomain/file references appear in multiple urlquery.net malware/phishing scan reports (e.g., reports for ukudubo.top, pixelbanana.pro, images.downho.com, ne2013.com/olx-order) listing up5yev.cyou with IP 104.21.73.183 and detection verdic
.cyou TLD ranks in top 10 for malware and phishing domains per 2022 BrandSec domain abuse report (5th in malware, 9th in phishing).
Multiple forum/Reddit posts document .cyou domains frequently used in spam and scam email campaigns (e.g., r/Scams post on .cyou scam emails; eM Client forum on blocking .cyou spam).
IP 104.21.73.183 (Cloudflare range) associated with up5yev.cyou in urlquery scans; no direct public complaints or reviews found for this exact subdomain.
No mentions on Reddit, Trustpilot, ScamAdviser, or major review sites; no positive reviews or business records identified.

Research summary

Narrative write-up from our AI analyst, grounded on the facts above

We searched scam-report databases, consumer-review sites, and general web sources for file769309.up5yev.cyou and didn't find direct consumer complaints, which is expected for a five-day-old site. However, our research found the domain listed in several technical threat reports alongside known malicious hosts like ukudubo.top and pixelbanana.pro. Additionally, community discussions on Reddit and various security forums highlight that .cyou domains are currently a primary vehicle for aggressive spam and phishing campaigns.

Antivirus Engines

Clean pass · verified

Clean across 0 engines

We cross-check every URL against our antivirus network of 0 malware and blacklist engines. None of them flagged this URL in the last scan.

0Malicious0Suspicious0Harmless0Engines

Clean

Kaspersky

Not in pass

Bitdefender

Not in pass

Microsoft

Not in pass

ESET-NOD32

Not in pass

Avira

Not in pass

Sophos

Not in pass

Fortinet

Not in pass

Google Safebrowsing

Not in pass

Emsisoft

Not in pass

No engine detections. The URL passed every antivirus and blacklist engine we queried in this scan. Stay vigilant — AV coverage is only one signal among many.

Security Scans

Blacklist Check

Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Technical checksdomain · encryption · redirects · server reputation

Domain & Encryption

Domain History

Age5 days old

RegistrarSpaceship, Inc.

RegisteredJun 30, 2026

ExpiresJun 30, 2027

Owner privacyVisible

Encryption Certificate

StatusValid

ProtocolTLSv1.3

IssuerGoogle Trust Services · WE1

ExpiresSep 28, 2026 (84d)

Self-signedNo

Hosting & Technology

HostingCloudflare, Inc.

Server locationUS

Server Reputation

Abuse Intelligence

Confidence score0%

Reports on file1

ISPCloudflare, Inc.

Usage typeContent Delivery Network

Proceed with caution

Our automated review flagged enough risk that you should treat this site as unverified.

Treat file769309.up5yev.cyou as unverified
Do not enter credentials or send money until you have independently verified the business.
Verify the business through independent channels
Check the company's social profiles, registry records, and search for recent news or reviews that are not hosted on the site itself.
Never use irreversible payment methods
Crypto, gift cards, wire transfers, and cash apps offer zero buyer protection. Use a credit card or PayPal if you must pay.
Share your experience
If you have additional context, drop a comment below or post on the MalwareTips forum.
Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing

Not listedCheck ↗

VirusTotal

Not listedCheck ↗

AbuseIPDB

Not listedCheck ↗

Also verify:Spamhaus ↗DNSBL / SURBL ↗PhishTank ↗

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

Our automated security review marked file769309.up5yev.cyou as suspicious. Several warning signs were detected; it may still turn out legitimate, but you should verify it through independent channels before trusting it with money or credentials.
file769309.up5yev.cyou currently scores 45/100 on our trust scale. We found enough warning signals to recommend caution. Verify the site through independent channels before entering credentials or money.
Yes. file769309.up5yev.cyou presents a valid TLSv1.3 certificate issued by Google Trust Services · WE1, expiring in 84 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
file769309.up5yev.cyou is 5 days old, registered on 6/30/2026 through Spaceship, Inc.. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
No. All 0 antivirus engines in our malware network report file769309.up5yev.cyou as clean.
No. file769309.up5yev.cyou is not currently listed on the major browser blocklist feeds that modern browsers use.
file769309.up5yev.cyou resolves to an IP operated by Cloudflare, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
This is a permanent record of the scan run on July 5, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around file769309.up5yev.cyou have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Final Verdict

Trust / 100

Final Verdict·file769309.up5yev.cyou

SUSPICIOUS

This is a recently registered subdomain that appears to be part of a wider network used for distributing malicious files or hosting phishing pages. The domain was created only five days ago and follows a naming pattern frequently seen in automated spam campaigns. You should avoid downloading any files or entering information on this page.

Do not download any files or provide personal information to this site. Close the page immediately and run a security scan if you have already interacted with it.

AV engines

MT passes

Net signals

Scan another URL

Security review completemalwaretips.com/url-scan

Recently scanned

Other Suspicious reports

Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…

Loading comments…

This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.